$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa File: 42aa81db-92e1-30b8-9602-29d0c339c48c.roa (raw, json) Hash identifier: ocx/5kU5gFDAdV0EMX4vjz4q8ryhCpWQ04o9GK26jzE= Subject key identifier: F3:ED:9A:47:C9:E9:FA:2C:98:7D:10:C4:86:E5:C0:0F:80:0C:47:91 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E4989D51E096EEA69F67AEA00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 275628 IP address blocks: 38.250.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d5:1e:09:6e:ea:69:f6:7a:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=8c845968-a423-481e-ace5-26f510747d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:4f:42:08:48:bf:64:92:12:02:61:d4:50: 36:d5:e1:25:27:43:84:ae:fd:67:72:93:12:73:e9: c1:27:29:f0:a3:64:45:5b:7c:9f:a2:61:6b:79:a2: 01:0f:c6:1b:d5:51:3e:17:8c:a8:ca:8c:8b:37:07: 8a:6c:07:68:14:53:8c:3d:95:58:e9:7b:d7:a0:da: b3:d9:53:c7:92:15:df:33:9f:28:60:48:9d:87:f4: 1f:84:ec:9f:2f:8f:f4:78:dd:64:6b:34:c8:13:97: 83:11:f4:34:67:e7:ea:fc:b9:02:4f:68:cd:c8:b7: 6b:f8:71:c4:07:2e:76:28:66:e0:79:df:fb:e8:50: e2:72:9a:ac:be:67:fb:a6:1f:93:4a:8e:dd:0b:70: 0b:43:4a:f0:59:50:2e:aa:41:c4:59:57:95:7c:89: 18:f5:66:72:2d:47:59:f0:fb:a8:da:1a:75:b5:70: 9d:c9:15:d0:08:b1:8c:f1:82:6d:8b:ac:60:e1:f6: ac:37:e1:e0:fd:4d:80:1f:04:3c:40:a2:76:ec:fa: 9b:f8:fa:07:c6:a4:41:4b:72:92:59:fe:2d:83:51: 8b:8a:ae:51:9b:45:fe:f0:72:5d:34:56:8e:e4:2b: 88:b8:71:63:c3:5c:4d:38:80:4a:00:f8:19:59:58: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:ED:9A:47:C9:E9:FA:2C:98:7D:10:C4:86:E5:C0:0F:80:0C:47:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:06:87:1f:68:8b:5b:78:8f:ce:f9:a2:a3:c3:00:da:ea:b6: 1e:15:38:99:4a:47:22:3c:67:80:09:92:b7:a0:d9:ed:60:c0: 0c:1e:f2:d6:08:6d:fd:e2:4e:bb:b8:ad:c3:c6:16:05:f3:a0: 8d:48:b7:d6:ee:fb:77:c9:5d:81:77:81:bb:79:08:20:b8:1e: 1e:7b:29:86:2a:7f:00:5f:12:77:54:b6:fa:31:e1:2d:72:07: 2a:f0:ae:67:65:4f:a2:fc:ae:5d:6e:c0:9d:32:04:b0:54:58: 91:19:cc:d9:e7:18:02:7c:ce:c6:e7:2c:06:cb:ec:fa:99:ec: 93:4f:0c:87:f3:63:6d:e5:7b:af:93:ae:2b:f6:9d:21:91:21: 2b:54:63:89:ac:9a:12:7b:55:16:54:34:f8:a8:35:af:d9:e4: ed:68:77:76:d3:a2:82:00:d1:96:fa:16:8a:ac:2b:f4:40:99: fb:b2:cc:ee:8b:ea:59:62:6a:9a:0f:51:24:9d:0a:84:b5:06: 90:c2:72:27:36:02:70:da:cb:1f:fe:df:80:48:2b:61:27:34: 8a:70:13:8f:f1:bc:08:bf:3e:cc:f1:ff:8c:d8:22:58:4d:bf: 36:ee:ce:d8:52:4d:91:00:4f:5d:e5:8a:ce:7e:b1:00:b4:a5: a3:36:ab:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JidUeCW7qafZ66gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk OGM4NDU5NjgtYTQyMy00ODFlLWFjZTUtMjZmNTEwNzQ3ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiNPQghIv2SSEgJh1FA21eElJ0OErv1ncpMS c+nBJynwo2RFW3yfomFreaIBD8Yb1VE+F4yoyoyLNweKbAdoFFOMPZVY6XvXoNqz 2VPHkhXfM58oYEidh/QfhOyfL4/0eN1kazTIE5eDEfQ0Z+fq/LkCT2jNyLdr+HHE By52KGbged/76FDicpqsvmf7ph+TSo7dC3ALQ0rwWVAuqkHEWVeVfIkY9WZyLUdZ 8Puo2hp1tXCdyRXQCLGM8YJti6xg4fasN+Hg/U2AHwQ8QKJ27Pqb+PoHxqRBS3KS Wf4tg1GLiq5Rm0X+8HJdNFaO5CuIuHFjw1xNOIBKAPgZWViCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPtmkfJ6fosmH0QxIblwA+ADEeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDJhYTgxZGItOTJlMS0z MGI4LTk2MDItMjlkMGMzMzljNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvpfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsGhx9oi1t4j875oqPDANrqth4VOJlKRyI8Z4AJkreg2e1gwAwe8tYI bf3iTru4rcPGFgXzoI1It9bu+3fJXYF3gbt5CCC4Hh57KYYqfwBfEndUtvox4S1y ByrwrmdlT6L8rl1uwJ0yBLBUWJEZzNnnGAJ8zsbnLAbL7PqZ7JNPDIfzY23le6+T riv2nSGRIStUY4msmhJ7VRZUNPioNa/Z5O1od3bTooIA0Zb6FoqsK/RAmfuyzO6L 6lliapoPUSSdCoS1BpDCcic2AnDayx/+34BIK2EnNIpwE4/xvAi/Pszx/4zYIlhN vzbuzthSTZEAT13lis5+sQC0paM2q/I= -----END CERTIFICATE-----Generated at Fri Jul 24 10:21:37 2026 by rpki-client